DOCKET NO.: MSFT-28 16/305955.01 PATENT 
Application No.: 10/691 ,759 REPLY FILED UNDER EXPEDITED 

Office Action Dated: October 29, 2007 PROCEDURE PURSUANT TO 

37 CFR § 1.116 

This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Currently Amended) A method for maintaining the security of data displayed 
on a display for a system comprising a secured execution environment and a second 
execution environment operating concurrently on the system , the secured execution 
environment comprising a nexus and the second execution environment comprising a 
different operating system, the method comprising: 

storing an image of at least one nexus graphical user interface element of said nexus, 
said at least one nexus graphical user interface element being associated with a first process 
running on said secured execution environment; and 

displaying said nexus graphical user interface element on said display, such that no 
part of said nexus graphical user interface element is obscured by a graphical user interface 
element associated with said different operating system of said second execution environment 
on said display. 

2. (Previously Presented) The method of claim 1, wherein displaying said nexus 
graphical user interface element comprises: 

ensuring that said nexus graphical user interface element contains no areas of 
transparency. 

3. (Previously Presented) The method of claim 1, wherein displaying said nexus 
graphical user interface element on a display comprises displaying said nexus graphical user 
interface element such that no part of said nexus graphical user interface element is obscured 
by a graphical user interface element associated with a second process running on said 
secured execution environment. 

4. (Original) The method of claim 1, further comprising: 

displaying only said graphical user interface elements on said display upon receipt of 
a user secure display indication. 
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5. 



(Currently Amended) A method for maintaining the security of data displayed 



on a display for a system comprising a secured execution environment and a second 
execution environment operating concurrently on the system , the secured execution 
environment comprising a nexus and the second execution environment comprising a 
different operating system, the method comprising: 

storing a nexus-user secret associated with said nexus of said secured execution 
environment; and 

displaying a nexus graphical user interface element of said nexus comprising said 
nexus-user secret on said display, where said nexus graphical user interface element is 
associated with a process running on said secured execution environment. 

6. (Previously Presented) The method of claim 5, wherein displaying a nexus 
graphical user interface element comprising said nexus-user secret on a display comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 

7. (Currently Amended) A method for maintaining the security of data displayed 
on a display for a system comprising a secured execution environment and a second 
execution environment operating concurrently on the system , the secured execution 
environment comprising a nexus and the second execution environment comprising a 
different operating system, the method comprising: 

accepting at least two nexus graphical data elements of said nexus , each associated 
with a process running on said secured execution environment, for display on said display; 
and 

displaying at least two nexus graphical user interface elements of said nexus , each of 
said nexus graphical user interface elements comprising one of said nexus graphical data 
elements and a common graphical user interface decoration. 

8. (Original) The method of claim 7, where said common graphical user interface 
decoration comprises a colored border. 
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9. (Original) The method of claim 7, where said common graphical user interface 
decoration comprises one or more randomly selected images. 



10. (Original) The method of claim 7, further comprising: 
changing said common graphical user interface decoration when a set time period 
elapses. 



1 1 . (Original) The method of claim 7, further comprising: 

changing said common graphical user interface decoration when a user decoration 
change indication is received. 

12. (Currently Amended) A method for maintaining the security of data displayed 
on a display for a system comprising a secured execution environment and a second 
execution environment operating concurrently on the system , the secured execution 
environment comprising a nexus and the second execution environment comprising a 
different operating system, the method comprising: 

storing public title information and [[a]] private title information for a nexus graphical 
user interface element of said nexus, the nexus graphical user interface element being 
associated with a process running on said secured execution environment; 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 



13. (Original) The method of claim 12, where said second execution environment 
includes a host window manager for managing graphical user interface elements on said 
display, where said host window manager creates a shadow graphical user interface element 
for said nexus graphical user interface element, and where said public title is used by said 
host window manager. 



14. (Original) The method of claim 12, further comprising: 
displaying each of said nexus graphical user interface element on said display 
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completely on a display, such that no part of said nexus graphical user interface element is 
obscured by a graphical user interface element associated with said second execution 
environment on said display, where each of said nexus graphical user interface elements 
comprises a common graphical user interface decoration. 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

15. (Currently Amended) A computer-readable storage medium containing 
computer executable instructions to maintain the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment 
operating concurrently on the system , the secured execution environment comprising a nexus 
and the second execution environment comprising a different operating system, the 
computer-executable instructions to perform acts comprising: 

storing an image of at least one nexus graphical user interface element of said nexus, 
the at least one nexus graphical user interface element being associated with a first process 
running on said secured execution environment; and 

displaying said nexus graphical user interface element on said display completely on a 
display , such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with said second execution environment on said 
display. 

16. (Previously Presented) The computer-readable storage medium of claim 15, 
where said act of displaying said nexus graphical user interface element comprises: 

ensuring that said nexus graphical user interface element contains no areas of 
transparency. 

17. (Previously Presented) The computer-readable storage medium of claim 15, 
where said act of displaying said nexus graphical user interface element on a display 
comprises displaying said nexus graphical user interface element such that no part of said 
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nexus graphical user interface element is obscured by a graphical user interface element 
associated with a second process running on said secured execution environment. 



18. (Previously Presented) The computer-readable storage medium of claim 15, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

displaying only said graphical user interface elements on said display upon 
receipt of a user secure display indication. 



19. (Currently Amended) A computer-readable storage medium containing 
computer executable instructions to maintain the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment 
operating concurrently on the system , the secured execution environment comprising a nexus 
and the second execution environment comprising a different operating system, the 
computer-executable instructions to perform acts comprising: 

storing a nexus-user secret associated with said nexus of said secured execution 
environment; and 

displaying a nexus graphical user interface element of said nexus comprising said 
nexus-user secret on said display, where said nexus graphical user interface element is 
associated with a process running on said secured execution environment. 

20. (Previously Presented) The computer-readable storage medium of claim 19, 
where said act of displaying a nexus graphical user interface element comprising said nexus- 
user secret on a display comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 



21. (Currently Amended) A computer-readable storage medium containing 
computer executable instructions to maintain the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment 
operating concurrently on the system , the secured execution environment comprising a nexus 
and the second execution environment comprising a different operating system, the 
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computer-executable instructions to perform acts comprising: 

accepting at least two nexus graphical data elements of said nexus , each associated 
with a process running on said secured execution environment, for display on said display; 
and 

displaying at least two nexus graphical user interface elements of said nexus , each of 
said nexus graphical user interface elements comprising one of said nexus graphical data 
elements and a common graphical user interface decoration. 

22. (Previously Presented) The computer-readable storage medium of claim 21, 
where said common graphical user interface decoration comprises a colored border. 

23. (Previously Presented) The computer-readable storage medium of claim 21, 
where said common graphical user interface decoration comprises one or more randomly 
selected images. 

24. (Previously Presented) The computer-readable storage medium of claim 21, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a set time period 
elapses. 

25. (Previously Presented) The computer-readable storage medium of claim 21, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a user decoration 
change indication is received. 

26. (Currently Amended) A computer-readable medium containing computer 
executable instructions to maintain the security of data displayed on a display for a system 
comprising a secured execution environment and a second execution environment operating 
concurrently on the system , the secured execution environment comprising a nexus and the 
second execution environment comprising a different operating system, the computer- 
executable instructions to perform acts comprising: 
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storing public title information and a private title information for a nexus graphical 
user interface element of said nexus, the nexus graphical user interface element being 
associated with a process running on said secured execution environment; 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 

27. (Original) The computer-readable medium of claim 26, where said second 
execution environment includes a host window manager for managing graphical user 
interface elements on said display, where said host window manager creates a shadow 
graphical user interface element for said nexus graphical user interface element, and where 
said public title is used by said host window manager. 

28. (Currently Amended) The computer-readable medium of claim 26, wherein 
the computer-executable instructions are adapted to perform acts further comprising: 

displaying each of said nexus graphical user interface element on said display 
completely on a display , such that no part of said nexus graphical user interface element is 
obscured by a graphical user interface element associated with said second execution 
environment on said display, where each of said nexus graphical user interface element 
elements comprises a common graphical user interface decoration[[.]]; 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

29. (Currently Amended) A system for maintaining the security of data displayed 
on a display for a system comprising a secured execution environment and a second 
execution environment operating concurrently on the system , the secured execution 
environment comprising a nexus and the second execution environment comprising a 
different operating system, the system comprising: 

secured execution environment first storage in said secured execution environment for 
storing private title information for a nexus graphical user interface element of said nexus, the 
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nexus graphical user interface element being associated with a process running on said 
secured execution environment^ and a nexus-user secret associated with said secured 
execution environment; 

second execution environment second storage in said second execution environment 
for storing public title information public title information for said nexus graphical user 
interface element; and 

a trusted window manager for displaying each of said nexus graphical user interface 
element elements on said display completely on a display , such that no part of said nexus 
graphical user interface element is obscured by a graphical user interface element associated 
with said second execution environment on said display, where each of said nexus graphical 
user interface element elements comprises a common graphical user interface decoration and 
said private title information. 

30. (Original) The system of claim 29, where said trusted window manager 
displays a nexus-user secret graphical user interface element comprising said nexus-user 
secret on said display. 
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